researching attention markets and crypto security

Joined May 2011
paraframe retweeted
i'm declaring war on cold wallet companies you paid them for ONE job, keep your coins safe. look what they did instead LEDGER 2020: customer database hacked. about 1 million emails, plus names, home addresses and phone numbers of about 272,000 buyers dumped on a public forum. basically a list of people who own crypto and where they live 2023: they launch Recover. your seed split in 3 and handed to 3 companies, unlocked with your ID and a selfie. people asked how that's even possible and their support account wrote this: "Technically speaking it is and always has been possible to write firmware that facilitates key extraction. You have always trusted Ledger not to deploy such firmware whether you knew it or not." then they deleted the tweet lol dec 2023: an ex employee got phished and still had publishing access. malicious code went out through Ledger's Connect Kit straight into dapps. more than $600,000 drained (ZachXBT's estimate) 2025: Nano S owners told no more app updates. the offer was 20% off a new one 2025: their multisig app takes $10 per transaction, or 0.05% on token transfers, on top of gas jan 2026: names, addresses, emails and phones exposed AGAIN, this time through their payment processor TREZOR jan 2024: support portal breached, contact details of up to 66,000 users may have been exposed. 41 confirmed phishing cases mar 2025: Ledger's own lab got past the Safe 3's genuine-device check. asked if a firmware update can fix it, Trezor said "Unfortunately not." aug 2026: shipping partner breached. names, emails, phones and shipping addresses of 81,000 customers sep 2026: fake "critical security alert" emails sent from Trezor's real [email protected] address. their words: "Our third-party e-mail provider has been breached." TANGEM dec 2024: the app wrote private keys into log files that could end up with support. Tangem says fewer than 0.1% of users were affected and no funds were lost COLDCARD jul 2026: a firmware random-number flaw let attackers recreate seeds. 1,082 BTC, about $70 million, gone from 1,196 addresses in 41 minutes. and updating the firmware doesn't save a seed that was already made SAFEPAL aug 2026: a plug-in flaw exposed the data of about 39,798 customers and since february scammers are mailing paper letters to people's homes pretending to be Ledger and Trezor, with a QR code that asks for your 24 words the math didn't break in a single one of these. it was the company sitting in the middle every time. the shop that knows your address, the firmware you can't read, the chip you have to trust, the partner that gets breached and now the new one. Trezor sells a $249 wallet they call "quantum-ready". their own site says: "A quantum-ready device does not protect your assets from quantum computers at this time. Blockchains must first upgrade to post-quantum cryptography." i didn't want to wait for the chain so i built the opposite qUSB a cold wallet you make from any USB stick you already have in a drawer - no company and no shop. nobody has your name or address because nobody ships you anything - no chip and no closed firmware, all the code is open - no curve. it signs with hash-based signatures checked on-chain by a small open Solana program, so your SOL sits behind that today and yeah it has limits, i'd rather tell you myself than in a breach notice. it's v1 and not audited so start small. there's no secure chip so the computer you sign on has to be clean. fees still use a normal Solana key. the program is still upgradeable by my key. full threat model is in the repo i've been building open source before this. SAM was mine and it went to a $4M ATH. qUSB is the next one and it stays open source no VC, no hardware to sell you. $qUSB fees pay the dev and the team to build it. you support $qUSB, i keep building this @Ledger @Trezor @Tangem @COLDCARDwallet @iSafePal tell me which line is wrong if one of them ever leaked your address, repost this qusb.app github.com/prfagit/qusb $qUSB CA: 9NDY4jY5gqcNfDrZsKujtnuvH12pPG5FUGS5QmwZpump
3
2
7
697
paraframe retweeted
qUSB is the first full self-custody cold wallet for your $SOL that you can make from any USB stick, and it's quantum-proof No chip, no vendor. It signs with hashes instead of curves, and an open-source Solana program checks every signature on-chain $qUSB fees pay the dev to build it qusb.app $qUSB CA: 9NDY4jY5gqcNfDrZsKujtnuvH12pPG5FUGS5QmwZpump @solana @toly @solana_devs
9
5
1
14
1,770
paraframe retweeted
I built a cold wallet you can make out of any USB stick. It's called qUSB, and it's quantum-proof qusb.app $qUSB here's the problem in plain words every Solana wallet today is protected by the same kind of math: elliptic curves, that includes Phantom, Backpack, your Ledger, all of them, y our public address is out in the open, and right now nobody can work backwards from it to your private key, normal computers would need longer than the universe has existed big enough quantum computer changes that there's a known algorithm, Shor's, that does exactly this: public key in, private key out, obody can tell you the date that machine shows up, ut when it does, every wallet built on curves is open, and moving your coins after the fact won't help if someone gets there first so I built a wallet that doesn't use curves at all qUSB signs with hashes instead, using Winternitz one-time signatures over SHA-256, hash-based signatures are the boring, well-understood kind of post-quantum crypto quantum computer has no shortcut against them, with no curve, there's nothing for Shor to break how it works: 1. take any USB stick from your drawer. No special hardware, no chip, no company 2. flash it with qUSB. It holds an encrypted keystore and the wallet program 3. run qusb init. You get 24 words and set a passphrase, and your keys are encrypted on the stick 4. qusb receive gives you a vault address. Send SOL to it from any wallet or exchange 5. to spend, you sign offline with the stick, then broadcast from any online computer, signed message is locked to one recipient and one amount, so the online machine can't redirect your funds the vaults live on Solana, small open-source program called qvault checks the hash-based signature on-chain before any SOL moves, there's no admin key and no backdoor over your funds lose the stick? everything comes back from your 24 words, someone steals the stick? without your passphrase they get encrypted noise What it doesn't do (I'd rather you hear it from me): - It's v1 and not audited yet - each vault key signs exactly once, wallet handles this and moves your change to the next vault - Fees and SPL tokens still use a normal Solana key, as every wallet today, keep only fee money there - If the computer you sign on has malware, it can see your keys while you sign, use a machine you trust the full threat model is in the repo why a token? I want qUSB to be the first serious open-source software with no financial dependency on anyone, no VC, no sales team, no paid marketing $qUSB is how it gets funded: the creator fees pay me and it that's it, he token gives no claim on anything, and the code stays open source whatever happens If you've used SAM, you know I ship open source. This is the next one code: github.com/prfagit/qusb qvault program: CnfS7soDNtZaJgshcU38tvDuK2zZZwFPAedRUdRm read the code, plug it in CA: 9NDY4jY5gqcNfDrZsKujtnuvH12pPG5FUGS5QmwZpump
16
13
4
39
8,004
paraframe retweeted
attention is the only market left.
37
4
1
43
1,834
paraframe retweeted
2
1
2
1,933
paraframe retweeted
console.hoodscout.app/ $HS holder access is live, using @privy so you don’t need to worry about connecting your wallet $100 worth of $HS required to enter the console Received invite codes still work too
1
2
1
7
2,831
paraframe retweeted
access works one way. lock $hs for 30 days and the chain lets you in. no subscription, no card, your tokens come back when you unlock. lock more, see more. it's early and i'm still building it in the open. want to see it before you touch the token? reply and i'll send you a demo code to test the whole thing free at console.hoodscout.app not financial advice. it's a research tool. use your head.
4
3
7
1,521
paraframe retweeted
$RAI is live. Robin AI is the agent for the robinhood chain reads the live tape. whats trending, whats new. gives you a straight read in plain english try the live preview at robinai.pro $RAI is the key to the full app when it ships. quick context. were new to the bankr audience but we shipped $SAM to 4M mcap before, took a while to get there. this one is in beta. demo version. we keep building as it gets traction, and if it doesnt, we learn contract: 0x08f292b9100834328472cb51fb597a1b2cdedba3 $RAI buy on robinhood chain
Replying to @prfa
robin ai ($rai) has been deployed on robinhood chain. • contract: 0x08f292b9100834328472cb51fb597a1b2cdedba3 • pool: 85% of supply (85b tokens) • vesting: 15% (15b tokens) to you over 2 years with a 90-day cliff • fees: 0.7% (95% to you / 5% to bankr) view on bankr: bankr.bot/launches/0x08f292b…
2
2
6
1,914
paraframe retweeted
a million views. zero dollars. ask me how 👀
1
1
4
272
paraframe retweeted
I just burned my entire $b40 position. on purpose. that's how the relic mint works: 59 wallets held to the end, and for the next 48 hours they mint by burning what's left. whatever it's worth. free 200 relics. 10 one of ones. you don't pick, the vault draws one blind and reveals it only once it's secured on chain after 48 hours it opens to everyone at 0.15 sol. day 7 the door closes and whatever's unclaimed stays unminted seat 0 is mine. claims are numbered in order from here
2
3
1
8
634
paraframe retweeted
you've probably noticed the numbers I post and the vague posting but it's all pretty clear by now what we do is the experiment of attention engineering. tiktok, reels and shorts accounts are ready with the video engine to support the experiment you can be the observer, or you can be the witness and the variable in this experiment. it's all up to you and the thing is, if you're in the list, you get access to all the early entries to each of those experiments. earlier than x. earlier than the chart. earlier than everyone outside of the room and at the end of those 30 days, you'll get all the data I've gathered on attention engineering. plus everything you need to make, wrap, launch, brand, and bring the audience to your product. crypto or wherever else that's the goal. that's $B40. discord access is coming soon. all you need is $50 worth of $B40 and to never sell it. even if it goes below $50, you spent exactly $50 and you still have the access. the second you sell, it's over
7
3
2
16
3,700
paraframe retweeted
14 known wallets traded solana:2GKyVqZz1pyWFMsQNQ9bWRfKFug9fFnxAP67dMSmpump on day 1. I pulled all of them @vibed333 turned 0.65 sol into 11.99. cleanest exit on the board @MattFws and @zsonderfv bought early and still haven't sold a single token @parsiiix @Log100x @jidn_w closed green and out. @zefwashere @Publixplayz @kadenox @savemejrus @Qavecc @fnmilito @FlippingProfits @maghrrebi traded the rest $4k to $120k, 30x, ~$450k volume, one public wallet, no team. the deployer sold nothing day 1 of 30.
4
1
1
13
1,720
paraframe retweeted
Claim is up b40.club/invite
you've probably noticed the numbers I post and the vague posting but it's all pretty clear by now what we do is the experiment of attention engineering. tiktok, reels and shorts accounts are ready with the video engine to support the experiment you can be the observer, or you can be the witness and the variable in this experiment. it's all up to you and the thing is, if you're in the list, you get access to all the early entries to each of those experiments. earlier than x. earlier than the chart. earlier than everyone outside of the room and at the end of those 30 days, you'll get all the data I've gathered on attention engineering. plus everything you need to make, wrap, launch, brand, and bring the audience to your product. crypto or wherever else that's the goal. that's $B40. discord access is coming soon. all you need is $50 worth of $B40 and to never sell it. even if it goes below $50, you spent exactly $50 and you still have the access. the second you sell, it's over
2
1
1
7
2,035
paraframe retweeted
before zero club is opening the room interact with post selected will receive invites
9
5
23
1,801
paraframe retweeted
I'm taking this experiment serious Each invite comes with the unique id and card
7
3
11
307
paraframe retweeted
first batch of invites sent, the early ones are in from here invites go to people who show up in the replies, not people who show interest being early got you in, being real is what keeps you in
16
2
12
465
paraframe retweeted
to get the access to the discord with ca before twitter - rt and leave a reply on attached tweet, follow so I can dm too
I made $100k in 3 months and I never sold a single token no rug, no presale, no team supply, nothing I just built and let the fees pay me took me 3 months to learn the thing no one still can understand: the tech doesn't matter, the chart doesn't matter, the "utility" doesn't matter a token launch is an attention market, that's the whole game, attention is the only asset. good code, no eyes = 0 mid code, 10k eyes = a winner so I'm running an experiment 30 days. 30 tokens. 30 different angles, sites, narratives, not lazy memecoins, real swings at the attention game I document every single one, what worked, what flopped, the exact moves by day 30 I'll have the recipe written down, how to manufacture attention and get paid for it few days to set up the infra (daily notes, agents, results) and we go follow if you want to watch someone speedrun the only game that's ever mattered on here
9
5
7
621
paraframe retweeted
I made $100k in 3 months and I never sold a single token no rug, no presale, no team supply, nothing I just built and let the fees pay me took me 3 months to learn the thing no one still can understand: the tech doesn't matter, the chart doesn't matter, the "utility" doesn't matter a token launch is an attention market, that's the whole game, attention is the only asset. good code, no eyes = 0 mid code, 10k eyes = a winner so I'm running an experiment 30 days. 30 tokens. 30 different angles, sites, narratives, not lazy memecoins, real swings at the attention game I document every single one, what worked, what flopped, the exact moves by day 30 I'll have the recipe written down, how to manufacture attention and get paid for it few days to set up the infra (daily notes, agents, results) and we go follow if you want to watch someone speedrun the only game that's ever mattered on here
16
6
2
14
2,001
paraframe retweeted
Good morning. Fresh commit is in, all tests passing on GitHub. Token rebrand is live on @dexscreener with the new GitHub link and a dedicated website just for OpenSAM. One-liner install is here: rent a vps or use your own device, run one command, do a quick interactive setup, and you’ve got a 24/7 agent with persistent memory. OpenSAM = $SAM opensam.xyz/
14
17
48
8,264